| arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee |  104.21.32.1 | 200 OK | 10 kB |
URL User Request GET arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectarrowhurt.xyz FingerprintF8:BD:3B:C8:3F:23:95:E0:AE:F9:78:2E:9C:3E:2B:D0:D0:44:6B:11 ValiditySun, 02 Mar 2025 03:04:27 GMT - Sat, 31 May 2025 04:01:29 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (5305) Hash0cf8f3558db55a5f4187958734c2622d b056e03455c3c5cdcbba0770e8ef40a1f1fb9576 b23bab9d1ba59a16db8660cd2ab16d6c97300a87baad8e773d6d893000fec461
GET /progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: arrowhurt.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 10:42:06 GMT
content-type: text/html
server: cloudflare
last-modified: Mon, 05 Dec 2022 19:58:48 GMT
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 931312f69b14712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sdk.unative.com/UNativeSDK.js |  185.76.9.11 | 200 OK | 17 kB |
URL GET sdk.unative.com/UNativeSDK.js IP185.76.9.11:443 ASN#60068 Datacamp Limited
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subject1058678020.rsc.cdn77.org Fingerprint84:DC:F0:8F:29:81:15:83:57:FF:C0:E4:0B:E0:D0:F8:41:3B:63:A0 ValiditySun, 09 Mar 2025 12:49:09 GMT - Sat, 07 Jun 2025 12:49:08 GMT
File typeJavaScript source, ASCII text, with very long lines (17396), with no line terminators Hash647c17795b88ec6b0432e10ebebbce67 ae012902de61b37343ed3288b65e07a4f94edb31 12f3ffc2bef3ae11d82ec74d1c21eaf9d7ee389d320b85d8fb00b666a6eefa2c
GET /UNativeSDK.js HTTP/1.1
Host: sdk.unative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://arrowhurt.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 10:42:07 GMT
content-type: application/x-javascript
last-modified: Thu, 27 Apr 2023 15:05:30 GMT
etag: W/"43f4-5fa52affcd6e3"
vary: Accept-Encoding
x-77-nzt: EwwBuUwJCgH34gwNAAwBuUwKEwH38QIAAAwBJRPCNAG3DIoGAA
x-77-nzt-ray: e2f75420c9cc2b067f89ff6715b7c509
x-77-cache: HIT
x-77-age: 855266
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| arrowhurt.xyz/favicon.ico | 104.21.32.1 | 200 OK | 6.9 kB |
URL GET arrowhurt.xyz/favicon.ico IP104.21.32.1:443
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerGoogle Trust Services Subjectarrowhurt.xyz FingerprintF8:BD:3B:C8:3F:23:95:E0:AE:F9:78:2E:9C:3E:2B:D0:D0:44:6B:11 ValiditySun, 02 Mar 2025 03:04:27 GMT - Sat, 31 May 2025 04:01:29 GMT
File typeMS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced, 32 bits/pixel Hashb58051f458d0cd0fbf58ff901356a6d6 2184af1e9211161e0c4ce7711da6350f049ad8eb 782316ae0ab742418ed75306b7ee0985230e28e27bc5cc88a5e3d4af648729ed
GET /favicon.ico HTTP/1.1
Host: arrowhurt.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 10:42:07 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dLrqLkDJ15Fb3GI8dhihvqs3Ha0qmCk13qRxGHUpdIsz0NSYl0EBTrpw%2FsuaNgf%2FYQ6WdaPnDhtphb%2BHUKDdobKIS6fb%2FiWls3UI3VJLz7nHN92ku0gz0FAAIjZJC6pc"}],"group":"cf-nel","max_age":604800}
etag: W/"6881-1670270328000"
last-modified: Mon, 05 Dec 2022 19:58:48 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 5791
content-encoding: br
cf-ray: 931312fa794a56c7-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6238&min_rtt=4142&rtt_var=4447&sent=35&recv=46&lost=0&retrans=0&sent_bytes=4985&recv_bytes=3179&delivery_rate=2212&cwnd=12000&unsent_bytes=0&cid=5eff355aa6966f28&ts=553&x=16"
|
|
| sdk.unative.com/UNativePageSDKES6.js?v=150706 | 185.76.9.11 | 200 OK | 183 kB |
URL GET sdk.unative.com/UNativePageSDKES6.js?v=150706 IP185.76.9.11:443 ASN#60068 Datacamp Limited
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subject1058678020.rsc.cdn77.org Fingerprint84:DC:F0:8F:29:81:15:83:57:FF:C0:E4:0B:E0:D0:F8:41:3B:63:A0 ValiditySun, 09 Mar 2025 12:49:09 GMT - Sat, 07 Jun 2025 12:49:08 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators Size183 kB (182707 bytes) Hashb3332c141ef65c70ffcb6c233261d49e 64340ed0e6f5ed9cefd865ab49b93b5b16e9dc53 2d97792c95b1c337e75917308f9da48c3497c1896cc3039106bf343b2f14d3b8
GET /UNativePageSDKES6.js?v=150706 HTTP/1.1
Host: sdk.unative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://arrowhurt.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 10:42:07 GMT
content-type: application/x-javascript
last-modified: Thu, 27 Apr 2023 15:05:30 GMT
etag: W/"2c9b3-5fa52affcd6e3"
vary: Accept-Encoding
x-77-nzt: EwwBuUwJCgH3cpUKAAwBuUwKDAH3TWwCAAwBw7WvAgG3CwAAAA
x-77-nzt-ray: e2f75420c9cc2b067f89ff6766d1900d
x-77-cache: HIT
x-77-age: 693618
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee |  162.55.0.219 | 200 | 18 B |
URL OPTIONS api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee IP162.55.0.219:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint28:C9:C0:12:B9:72:4E:A1:B8:3B:81:C0:D5:40:82:BF:E2:6B:DE:D7 ValiditySun, 02 Mar 2025 08:09:31 GMT - Sat, 31 May 2025 08:09:30 GMT
File typeASCII text, with no line terminators Hashcc7fd95a87ea3721ce1853bf3c4dd75e 7f687f7881adf0fc407378d375a61b8f198c0912 0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /p/w/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: api-un.unative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,sdk-version
Referer: https://arrowhurt.xyz/
Origin: https://arrowhurt.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
allow: HEAD,GET,OPTIONS
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: content-type,sdk-version,origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
access-control-allow-headers: content-type,sdk-version,origin,accept,content-type,x-requested-with
content-type: text/plain;charset=UTF-8
content-length: 18
date: Wed, 16 Apr 2025 10:42:07 GMT
|
|
| pstopp.com/r4/index.php?p=2&pid=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&sid=1471313&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&u=https://trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&rurl=https://creatives.altaffiliatesol.com/hentaiheroes/?ref_id=135846&td=ep&tc=91b75fed-e221-4087-b908-2fb4b83bd446&impid=1&exchange_name=Evadav_Pop_adl&bid=0.0007&ts=1744800101798&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&imp_url=https://analytics.ozlinedsp.com/tracking/imp.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&imp_nurl_url=https://analytics.ozlinedsp.com/tracking/imp?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&campaign_id=c15afc93-c4c7-4531-a39a-cd7173e98da2&campaign=LQ_T2+EVADAV_ADL&creative_id=660bdeed-955b-4b64-af85-756754f69c29&media_type=SITE&tag_id=&app_name=&app_id=&site=&site_id=1471313&placement=&category=&sub_category=&app_bundle=&placement_id=1471313&site_url=evadav.com&carrier=-&device_os=windows&os_version=10.0&device=pc&device_id=&device_hwv=&device_make=&device_model=&language=en&platform_ip=&lat=&lon=&country=TWN&cc=®ion=taipei&city=taipei&zc=100&isp=-&ip=185.213.82.17&ua=mozilla/5.0+(windows+nt+10.0;+win64;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/135.0.0.0+safari/537.36&ifa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&idfa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&gaid= | 104.21.35.146 | 200 OK | 7.9 kB |
URL User Request GET pstopp.com/r4/index.php?p=2&pid=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&sid=1471313&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&u=https://trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&rurl=https://creatives.altaffiliatesol.com/hentaiheroes/?ref_id=135846&td=ep&tc=91b75fed-e221-4087-b908-2fb4b83bd446&impid=1&exchange_name=Evadav_Pop_adl&bid=0.0007&ts=1744800101798&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&imp_url=https://analytics.ozlinedsp.com/tracking/imp.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&imp_nurl_url=https://analytics.ozlinedsp.com/tracking/imp?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&campaign_id=c15afc93-c4c7-4531-a39a-cd7173e98da2&campaign=LQ_T2+EVADAV_ADL&creative_id=660bdeed-955b-4b64-af85-756754f69c29&media_type=SITE&tag_id=&app_name=&app_id=&site=&site_id=1471313&placement=&category=&sub_category=&app_bundle=&placement_id=1471313&site_url=evadav.com&carrier=-&device_os=windows&os_version=10.0&device=pc&device_id=&device_hwv=&device_make=&device_model=&language=en&platform_ip=&lat=&lon=&country=TWN&cc=®ion=taipei&city=taipei&zc=100&isp=-&ip=185.213.82.17&ua=mozilla/5.0+(windows+nt+10.0;+win64;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/135.0.0.0+safari/537.36&ifa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&idfa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&gaid= IP104.21.35.146:443
CertificateIssuerGoogle Trust Services Subjectpstopp.com FingerprintED:7F:56:13:FF:3A:11:A4:12:AC:F0:67:42:F7:69:6A:32:BD:72:98 ValidityFri, 14 Mar 2025 09:31:09 GMT - Thu, 12 Jun 2025 10:29:24 GMT
File typeHTML document, ASCII text, with very long lines (794) Hashe517c39aaf7751fa53d3823d5982759d 3d43fbdd38e64383b73817cbce173be09a544f4f b4209ed24c60e9a4498f75a19319cc99b26218eeaecb173a11d12fb034fc188c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /r4/index.php?p=2&pid=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&sid=1471313&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&u=https://trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&rurl=https://creatives.altaffiliatesol.com/hentaiheroes/?ref_id=135846&td=ep&tc=91b75fed-e221-4087-b908-2fb4b83bd446&impid=1&exchange_name=Evadav_Pop_adl&bid=0.0007&ts=1744800101798&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&imp_url=https://analytics.ozlinedsp.com/tracking/imp.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&imp_nurl_url=https://analytics.ozlinedsp.com/tracking/imp?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&campaign_id=c15afc93-c4c7-4531-a39a-cd7173e98da2&campaign=LQ_T2+EVADAV_ADL&creative_id=660bdeed-955b-4b64-af85-756754f69c29&media_type=SITE&tag_id=&app_name=&app_id=&site=&site_id=1471313&placement=&category=&sub_category=&app_bundle=&placement_id=1471313&site_url=evadav.com&carrier=-&device_os=windows&os_version=10.0&device=pc&device_id=&device_hwv=&device_make=&device_model=&language=en&platform_ip=&lat=&lon=&country=TWN&cc=®ion=taipei&city=taipei&zc=100&isp=-&ip=185.213.82.17&ua=mozilla/5.0+(windows+nt+10.0;+win64;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/135.0.0.0+safari/537.36&ifa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&idfa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&gaid= HTTP/1.1
Host: pstopp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 10:42:05 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
x-powered-by: PHP/7.4.16
vary: Accept-Encoding
cf-cache-status: DYNAMIC
content-encoding: br
set-cookie: _tfc=a53d72be5082b0c74a53fa32c5d8dc1b; SameSite=Strict
cf-ray: 931312f168b6b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img.altaffiliatesol.com/mkt/acct/1be035660d66d3/tick?td=ep&ip=91.90.42.154&creative_id=1t14u4f0m9jsxiub13gh57vnz9sn6&ts=1744800125736&pub_id=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&tc=327ef770-a2f8-4228-a528-7cf2479749fb | 0.0.0.0 | | 0 B |
URL GET img.altaffiliatesol.com/mkt/acct/1be035660d66d3/tick?td=ep&ip=91.90.42.154&creative_id=1t14u4f0m9jsxiub13gh57vnz9sn6&ts=1744800125736&pub_id=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&tc=327ef770-a2f8-4228-a528-7cf2479749fb IP0.0.0.0:0
Requested byhttps://pstopp.com/r4/index.php?p=2&pid=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&sid=1471313&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&u=https://trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&rurl=https://creatives.altaffiliatesol.com/hentaiheroes/?ref_id=135846&td=ep&tc=91b75fed-e221-4087-b908-2fb4b83bd446&impid=1&exchange_name=Evadav_Pop_adl&bid=0.0007&ts=1744800101798&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&imp_url=https://analytics.ozlinedsp.com/tracking/imp.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&imp_nurl_url=https://analytics.ozlinedsp.com/tracking/imp?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&campaign_id=c15afc93-c4c7-4531-a39a-cd7173e98da2&campaign=LQ_T2+EVADAV_ADL&creative_id=660bdeed-955b-4b64-af85-756754f69c29&media_type=SITE&tag_id=&app_name=&app_id=&site=&site_id=1471313&placement=&category=&sub_category=&app_bundle=&placement_id=1471313&site_url=evadav.com&carrier=-&device_os=windows&os_version=10.0&device=pc&device_id=&device_hwv=&device_make=&device_model=&language=en&platform_ip=&lat=&lon=&country=TWN&cc=®ion=taipei&city=taipei&zc=100&isp=-&ip=185.213.82.17&ua=mozilla/5.0+(windows+nt+10.0;+win64;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/135.0.0.0+safari/537.36&ifa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&idfa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&gaid=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mkt/acct/1be035660d66d3/tick?td=ep&ip=91.90.42.154&creative_id=1t14u4f0m9jsxiub13gh57vnz9sn6&ts=1744800125736&pub_id=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&tc=327ef770-a2f8-4228-a528-7cf2479749fb HTTP/1.1
Host: img.altaffiliatesol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pstopp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6 | 88.99.51.152 | 302 | 10 kB |
URL User Request GET trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6 IP88.99.51.152:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjecttrcpo.com FingerprintD0:15:FF:D4:2E:76:82:BE:8B:20:F5:C6:D0:ED:99:21:AE:C9:6E:ED ValiditySat, 08 Mar 2025 08:07:08 GMT - Fri, 06 Jun 2025 08:07:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6 HTTP/1.1
Host: trcpo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302
location: https://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-length: 0
date: Wed, 16 Apr 2025 10:42:06 GMT
|
|
| tr-un.unative.com/track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee | 162.55.0.220 | 200 | 18 B |
URL OPTIONS tr-un.unative.com/track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee IP162.55.0.220:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint28:C9:C0:12:B9:72:4E:A1:B8:3B:81:C0:D5:40:82:BF:E2:6B:DE:D7 ValiditySun, 02 Mar 2025 08:09:31 GMT - Sat, 31 May 2025 08:09:30 GMT
File typeASCII text, with no line terminators Hashcc7fd95a87ea3721ce1853bf3c4dd75e 7f687f7881adf0fc407378d375a61b8f198c0912 0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: tr-un.unative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,sdk-version
Referer: https://arrowhurt.xyz/
Origin: https://arrowhurt.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
allow: HEAD,GET,OPTIONS
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: content-type,sdk-version,origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
access-control-allow-headers: content-type,sdk-version,origin,accept,content-type,x-requested-with
content-type: text/plain;charset=UTF-8
content-length: 18
date: Wed, 16 Apr 2025 10:42:08 GMT
|
|
| api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee | 162.55.0.219 | 200 | 429 B |
URL GET api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee IP162.55.0.219:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint28:C9:C0:12:B9:72:4E:A1:B8:3B:81:C0:D5:40:82:BF:E2:6B:DE:D7 ValiditySun, 02 Mar 2025 08:09:31 GMT - Sat, 31 May 2025 08:09:30 GMT
Hashaa5bf976f2cec3161a2fd92593ff63cc d064b8b81676a9893437b890c927433415a1fe4e 22b9c3b2a424da9ba78986be4baca36b4334241398812cabc44b71af5d1dd7c1
GET /p/w/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: api-un.unative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arrowhurt.xyz/
content-type: application/json;charset=UTF-8
sdk-version: unative/web/150706
Origin: https://arrowhurt.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-type: application/json;charset=UTF-8
content-length: 429
date: Wed, 16 Apr 2025 10:42:07 GMT
|
|
| arrowhurt.xyz/js/pop-sdk.js | 104.21.32.1 | 200 OK | 4.9 kB |
URL GET arrowhurt.xyz/js/pop-sdk.js IP104.21.32.1:443
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerGoogle Trust Services Subjectarrowhurt.xyz FingerprintF8:BD:3B:C8:3F:23:95:E0:AE:F9:78:2E:9C:3E:2B:D0:D0:44:6B:11 ValiditySun, 02 Mar 2025 03:04:27 GMT - Sat, 31 May 2025 04:01:29 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash7a3b88db9f1e69e84da82f3ecf466391 aab94e786ce955f7918fd7d2ad1a9f8171dae983 68fc8807e968efa891db5b096b21d7cc998884bdf7cf5e8adfa127fdaf325990
GET /js/pop-sdk.js HTTP/1.1
Host: arrowhurt.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 10:42:06 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=co6p2bjO%2B9BaCA6glRAaiRhqCxFjtIGS3cBj1iNupHCHzodvcImqfT7baKDKl0zCnN5ofBW2YUM3HkTDDpa%2FhMvYIwwksZ0zhuH8%2FLdBRMQGeaZq02IGQTNAJQj3oMo4"}],"group":"cf-nel","max_age":604800}
etag: W/"4899-1670270328000"
last-modified: Mon, 05 Dec 2022 19:58:48 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6799
content-encoding: br
cf-ray: 931312f8f94656c7-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6238&min_rtt=4142&rtt_var=4447&sent=35&recv=46&lost=0&retrans=0&sent_bytes=4985&recv_bytes=3179&delivery_rate=2212&cwnd=12000&unsent_bytes=0&cid=5eff355aa6966f28&ts=310&x=16"
|
|
| tr-un.unative.com/track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee | 162.55.0.220 | 200 | 0 B |
URL GET tr-un.unative.com/track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee IP162.55.0.220:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://arrowhurt.xyz/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint28:C9:C0:12:B9:72:4E:A1:B8:3B:81:C0:D5:40:82:BF:E2:6B:DE:D7 ValiditySun, 02 Mar 2025 08:09:31 GMT - Sat, 31 May 2025 08:09:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: tr-un.unative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://arrowhurt.xyz/
content-type: application/json;charset=UTF-8
sdk-version: unative/web/150706
Origin: https://arrowhurt.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-length: 0
date: Wed, 16 Apr 2025 10:42:08 GMT
|
|
![Share reporttesting](/search?q=http.url.addr:"pstopp.com/r4/index.php?p=2&pid=3328883b-eb53-44d7-9cfa-efdd2d22e9a7&sid=1471313&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&u=https://trcpo.com/track/click/zy7ZcgzhwuCsmXmBcntBGOGLOpYLlQHuoPd72bc0XXDP2-TSmRmhtpX2hwBWu3iMZP6ZjxuViXAfEmif_zTkl9zNLuCqAcvqJHHMpxYPbKHB7NNgzRwoaDST0yKyt0maeg4aYT88U9vV7lcywm1ZsjOEGDB8mzt0Ra9YHQLlqbFqmspnuRF6kRLrVkKCdaAMklHm4jLaTL-X5Y-x0RQt3cgrySLEp7HXOa0vgBm7naqAHtlmxU37kMVFhng65d6yqrqSWol2Lke9sTCgv4llkIiJwYDJwBKnSxxNRN9rA1zlO982zRK6Kmuhd44AvUsKDsAbWeDqOV4JyBAZBfxbq4E-pox7d0kSXO1Zmx0I65mxbpWTGq71eSQ2NVkfX-SjZQbPlH4Br70c2_UtHZ2d9sPwCgZe41Qsfkjkj-tfMj48otqAXXqEJ5QHsl-P-T7rP708RbqiV0I-QkHSLYaiQCunh283mFHMC--Y1hV6wqQbTrhLG9GKfV3B6bqiaO0JVI7TOgd4h8sSxh2tZ7djM5-rUz-lE4J-LHNzS-Eq98Bl05xdxLse12akT2t2v_lHHw7mbuECPS49GCUgnuUnamhb9GAY?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&rurl=https://creatives.altaffiliatesol.com/hentaiheroes/?ref_id=135846&td=ep&tc=91b75fed-e221-4087-b908-2fb4b83bd446&impid=1&exchange_name=Evadav_Pop_adl&bid=0.0007&ts=1744800101798&tid=1t14u4f0m9jsxiub13gh57vnz9sn6&imp_url=https://analytics.ozlinedsp.com/tracking/imp.gif?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&imp_nurl_url=https://analytics.ozlinedsp.com/tracking/imp?token=1t14u4f0m9jsxiub13gh57vnz9sn6&price=${AUCTION_PRICE}&campaign_id=c15afc93-c4c7-4531-a39a-cd7173e98da2&campaign=LQ_T2+EVADAV_ADL&creative_id=660bdeed-955b-4b64-af85-756754f69c29&media_type=SITE&tag_id=&app_name=&app_id=&site=&site_id=1471313&placement=&category=&sub_category=&app_bundle=&placement_id=1471313&site_url=evadav.com&carrier=-&device_os=windows&os_version=10.0&device=pc&device_id=&device_hwv=&device_make=&device_model=&language=en&platform_ip=&lat=&lon=&country=TWN&cc=®ion=taipei&city=taipei&zc=100&isp=-&ip=185.213.82.17&ua=mozilla/5.0+(windows+nt+10.0;+win64;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/135.0.0.0+safari/537.36&ifa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&idfa=8ce0a756-83ad-3fd9-b088-6f2f338f23d7&gaid="){kind=link}